851 matches found
hanaya-place.com Cross Site Scripting vulnerability OBB-2272052
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-20833
The CVE-2021-20833 advisory concerns the SNKRDUNK Market Place App for iOS prior to version 2.2.0, which has improper server certificate verification. The underlying issue is certificate validation failure in the app, enabling a man-in-the-middle (MitM) attacker to eavesdrop on and potentially al...
JVN#10168753: SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification
SNKRDUNK Market Place App for iOS provided SODA, Inc. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on and/or alter the communication. Solution Update the application Update the application to the latest...
CVE-2021-39582
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...
UBUNTU-CVE-2021-39582
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swfGetPlaceObject located in swfobject.c. It allows an attacker to cause code Execution...
CVE-2020-22122
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...
CVE-2020-22122
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...
Sql injection
A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...
CVE-2020-22122
Find a Place LJCMS v1.3 contains a SQL injection in /oa.php?c=Staff&a=read that can allow a crafted POST request to access sensitive database information. The affected component appears to be the LJCMS web application’s staff read endpoint; root cause is SQL injection. Several sources (NVD, Red H...
NorthSec CTF 2021 Write Up: 'Impurity Assessment Form'
This is a write up of a NorthSec 2021 CTF problem I solved with Allan Wirth @AllanWirth as part of team SaaS which finished in 3rd. It was an extremely creative problem to solve so I wanted to share it here...
It's Official - Akamai is a Great Place to Work
When Akamai Costa Rica won the 'Great Place to Work' award, we were delighted. It's a wonderful achievement that really means a lot to Akamai and to all the collaborators who have worked here. It highlights the great working environment that Akamai have created for us. But it also shines a light ...
CVE-2021-24185
The tutorplacerating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students...
Qualcomm 组件 输入验证错误漏洞
The Qualcomm component is a component of Qualcomm Incorporated Qualcom. Intrinsic components that provide Qualcomm devices A security vulnerability exists in the Qualcomm Closed Source Component that originates from a write out-of-place by not checking the buffer size before copying to the buffer...
Klog Server 2.4.1 Command Injection
Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...
Chrome V8 Turbofan Type Confusion Exploit
V8: Turbofan fails to deoptimize code after map deprecation, leading to type confusion NOTE: We have evidence that the following bug is being used in the wild. Therefore, this bug is subject to a 7 day disclosure deadline. VULNERABILITY DETAILS When turbofan compiles code that performs a Map...
it-market-place.com Cross Site Scripting vulnerability OBB-1412883
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
camptonplacesf.com Cross Site Scripting vulnerability OBB-1384482
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-25375
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...
Cross site scripting
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...
CVE-2020-25375
Wordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting via the Business Name field, Tax Code field, First Name field, Address field, Town field, Phone field, Mobile field, Place of Birth field, Web Site field, VAT Number field, Last Name field, Fax field...